Install Email Invitation-Based Agent on Windows File Server
- Updated On 18 Oct 2020
- 3 Minutes To Read
Windows Fileserver Installation - Email Invitation-based Agent
Designating folders on a fileserver as Protected Folders causes any new data written into those folders, whether from local sources or remote, to be protected as part of the Circle for which the folder was designated. When the SecureCircle Agent is running on the fileserver itself, the configuration of its Protected Folders is centralized to the fileserver, ensuring that all data written to the folders is protected, regardless of remote client configuration.
The following describes how to install and configure the Email Invitation-based SecureCircle Agent on the fileserver, which is recommended for fileservers that are not part of an Active Directory environment.
Invite File Server User Using Email-based Invitation
- In the SecureCircle Server Admin UI, select one or more Circles, click on the Action button, then select Add User.
- Enter the user's details as desired, then select Invite or Add. It is not necessary that the details correspond with a real user or email address. If you do use an existing user's email address, it will attach their user information to the Circles chosen. If the email does not already exist attached to a user account, a different prompt will appear below asking for the user's Full Name and optional messages or email invitation.
- Click the name of any one of the Circles selected in step #1 in order to manage it. Navigate to the Users submenu for the Circle, then select the new user's item. Scroll down in the description to find the Invitation ID link.
- Copy the link by right-clicking on it and selecting "Copy Link Address".
- Paste the link in an Internet browser on the File Server to download the SecureCircle Agent installer.
- Complete the SecureCircle Agent installation on the File Server.
- Navigate to the Devices menu, then search for the device associated with the user account you invited. The SecureCircle client must have been installed on the File Server or it will not show up in this list.
- Select the File Server device and either click Actions, or right-click the File Server Device then click Confirm Device.
Option #1: Using SecureCircle fhtools Command-line Utility to Specify Persistent Folder Attachments as the Local System Service
Execute fhtools as the Local System Service (Folder Attachment will be active at all times and persists across reboots)
Download the PSTools Suite from Microsoft and extract PSExec.exe to a directory in the path (e.g., current working directory, C:\Windows\System32, etc.) https://docs.microsoft.com/en-us/sysinternals/downloads/pstools
Open an Administrative Command Prompt.
Open a Command Prompt as the Local System Service by executing the following.
psexec -i -s cmd.exe
- Run the fhtools --attach command with the Circle ID from the "Determining the Circle ID to which a Folder will be Attached" section. For example:
fhtools --attach --input="C:\shares\share1" --circle=0f2c20b9-0ef4-11e9-a1e4-595bf59f9ebc --url=demo.securecircle.com
Determining the Circle ID to which a Folder will be Attached
Navigate to the Circles menu in the SecureCIrcle Server Admin UI.
Select the checkbox near the desired Circle.
In the Description menu near the bottom of the page, select and copy the Circle ID value for later use. You can also mouse over it for a moment and a box will appear to the right side of the line. This will copy the data to your clipboard.
Option #2: Designate Folders on Fileserver as Protected Folders Using the Windows GUI
When using this option: Protected folders exist under the user's context.
They are attached on log on and detached on log off. What this means is, while logged on as that user, files going into a protected folder will be protected, but once the user logs off the mechanism that watches activity on that folder is disabled and files going in are no longer automatically protected. This works well for users and test environments but in a server environment it might not be desirable behavior.
Navigate to the shared folders that should be designated as Protected Folders.
Right-click on each folder and select "Add to Circle", selecting the desired Circle.